Infosecurity News
Care2 fails to take care of members' personal information
Online community Care2 has notified its close to 18 million members that the site’s servers were attacked, resulting in a security breach.
Hackers celebrate New Year's by breaching Philippine government websites
The PrivateX hacker group breached two Philippine government websites, the Office of the Vice President (OVP) and the Philippine Nuclear Research Institute (PNRI), on New Year’s Day.
Service wipes data from government PCs with degaussing
PC Recycler provides electronics recycling services to a number of US government agencies, using degaussing to wipe data from the devices before destruction.
Saudi hackers publish personal data Israeli sports site subscribers
Saudi hackers who claim they are members of Anonymous have breached the Israeli ONE sports website and leaked personal information on 400,000 subscribers.
Raytheon goes on cybersecurity buying spree
Last month, US defense contractor Raytheon acquired two companies that supply cybersecurity products and services to the US military: Henggeler Computer Consultants and Pikewerks Corp.
Critical infrastructure firms should update cybersecurity infrastructure, McAfee advises
Based on its assessment that cyberattacks against critical infrastructure will increase next year, McAfee advises critical infrastructure companies to upgrade their cybersecurity infrastructure.
No rogue certificates were issued by Comodohacker, says GlobalSign
After an extensive review, Belgian certificate authority (CA) GlobalSign said that no rogue certificates were issued and no customer data were exposed as the result of a breach disclosed in September.
India's Paladion to set up cybercrime monitoring hub in Oman
Indian information security firm Paladion Networks has announced plans to set up a dedicated hub in Oman to monitor and respond to cybercrime in the sultanate.
Buffer overflow vulnerability identified in Sielco Sistemi SCADA system
The US Department of Homeland Security (DHS) is warning about a buffer overflow vulnerability in the Sielco Sistemi Winlog application used to control industrial systems.
Malware blocking – not sandboxing – key to browser security, says Imperva
The browser’s ability to block socially engineered malware, not sandboxing technology, is the most important criteria to judge browser security, argues Rob Rachwald, director of security strategy at data security firm Imperva.
On the second day of Christmas, Mozilla gave two Firefox version 9s
On Tuesday, Mozilla released version 9 of its Firefox browser with fixes for a number of memory safety bugs in the browser engine; then, 24 hours later, it released 9.0.1 to fix a bug that caused Mac, Linux, and Windows users’ browsers to crash.
Anonymous claims responsibility for takedown of Egyptian government sites
The hacktivist group Anonymous claimed this week that it took down a dozen Egyptian government websites using distributed denial of service (DDoS) attacks in retaliation for the government’s treatment of protestors.
$16 million class-action lawsuit filed over UCLA Health System data breach
A $16 million class-action lawsuit has been filed against the UCLA Health System for a data breach that compromised personal information of more than 16,000 patients.
Multi-factor biometrics to change the security landscape, IBM predicts
Multi-factor biometric authentication is one of the five innovations that are likely to change the tech landscape within five years, according to IBM’s 5 in 5 annual list of innovations.
Twitter says Whisper Systems' encryption software will no longer be a secret
Microblogging service Twitter has decided to open source some of Whisper Systems' software, including the TextSecure text-messaging encryption for Android devices, on Github.
Chinese group hacks into US Chamber of Commerce networks
A Chinese group allegedly hacked into the US Chamber of Commerce networks last year and gained access to information on its three million members.
Hackerazzi use Lady Gaga’s Twitter account to scam her ‘little monsters’
Hackers broke into pop star Lady Gaga’s Twitter account and broadcasted a link to a scam offer for free iPad 2s to her 17 million fans, whom she calls “little monsters.”
Feds indict 55 people in New York cybercrime ring
The Manhattan District Attorney has indicted 55 individuals for operating a $2 million organized cybercrime ring that relied on corrupt employees at companies and institutions to steal personal information of victims.
APTs expected to grow in volume and sophistication, warns Fidelis chief
Nation-state-sponsored advanced persistent threats (APTs) are only going to increase in volume and sophistication over the next few years, and the US needs to take the offense in countering these threats, argues Peter George, president and chief executive officer of network security firm Fidelis.
Wisegate launches micro-community for privacy and compliance professionals
Wisegate, a newly formed social networking site for information security professionals, has added a privacy and compliance micro-community for senior-level privacy and compliance professionals.
